Re: [Exim] Generic VBS script detection

Top Page
Delete this message
Reply to this message
Author: Jeffrey Goldberg
Date:  
To: Vadim Vygonets
CC: Exim
New-Topics: Re: [Exim] Generic VBS script detection - filter attached
Subject: Re: [Exim] Generic VBS script detection
On Fri, 5 May 2000, Vadim Vygonets wrote:

> To be even more pedantic, when matching quoted filename, you need
> to write:
>
> \"[^\\\"]*(?:\\.[^\\\"]*)*\.(?:vbs|vbe|wsh|js|jse)\"
>
> I think.


Possibly, but it is ok to not care. If my regex is too broad and
matches

name="foo.txt.nasty

is that really such a problem? We are not trying to write a full MIME
parser in perl, just get something that won't have too many false
positives and false negatives. Unlikely false positives should not be
considered a problem.

-j


-- 
Jeffrey Goldberg                +44 (0)1234 750 111 x 2826
 Cranfield Computer Centre      FAX         751 814
 J.Goldberg@???     http://WWW.Cranfield.ac.uk/public/cc/cc047/
Relativism is the triumph of authority over truth, convention over justice.